Fortinet NSE8_812 Exam Real Questions

Prepare and pass your Fortinet NSE 8 - Written Exam (NSE8_812) with free NSE8_812 exam questions.

Page: 1 / 14

Total 70 Questions | Updated On: Oct 25, 2024

Add To Cart

Question 1

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

A : IM validation in a session profile

B : nder domain validation in a session profile

C : personation analysis in an antispam profile

D : ft fail SPF validation in an antispam profile

Answer: C

Question 2

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

A : port16 and port1

B : rt1 and port1

C : rt16 and port15

D : rt1 and port15

Answer: A

Question 3

Refer to the exhibits.

A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADC

devices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must accept

unencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward the

inspected traffic to FAD-2.

The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to the

firewall policy handling the web application traffic on CL-1.

Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)

A :

B :

C :

D :

Answer: B,C

Question 4

Refer to the exhibit.

You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

A : With no members configured

B : With members and assign overlay interfaces

C : With members and assign interfaces but do not specify a gateway

D : With members without interface assignments

Answer: B

Question 5

Refer to the exhibit.

To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with

configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface

options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

A : t net-device disable

B : t mode-cfg enable

C : t ike-version 1

D : t add-route enable

E : t mode-cfg-allow-client-selector enable

Answer: A,D

Page: 1 / 14

Total 70 Questions | Updated On: Oct 25, 2024

Add To Cart